This is an advanced cookbook and reference guide for digital forensicpractitioners. File System Forensic Analysis focuses on the file system and disk.The file system of a computer is where most files are stored and where mostevidence is found, it also the most technically challenging part of forensicanalysis. This book offers an overview and detailed knowledge of the filesystem and disc layout. The overview will allow an investigator to more easilyfind evidence, recover deleted data, and validate his tools. The cookbooksection will show how to use the many open source tools for analysis, many ofwhich Brian Carrier has developed himself.